Threats Tagged 'ghsa-wvmc-29rv-83j2'

SiYuan note-taking software versions before 3.8.4 contain a cross-site scripting (XSS) vulnerability due to improper HTML escaping of flashcard block content. This flaw allows attacker-supplied content to execute scripts in a privileged renderer context when an administrator views the card manager. The vulnerability requires authentication and administrator privileges to exploit and can lead to arbitrary code execution on the host system.